Kuala Lumpur (VNA) – Several Malaysian government websites have been targeted in cyberattacks linked to a security flaw in the Joomla content management system (CMS), according to the National Cyber Security Agency (NACSA).
According to a statement from NACSA, the affected websites include those of the Ministry of Health (MOH), the Malaysia Cooperative Societies Commission, the Handicraft Development Corporation and the Women's Development Department (JPW).
The Health Ministry's website was reportedly hacked by a group calling itself "Mushr00w", causing the site to become inaccessible.
In an advisory issued on June 26, the National Cyber Coordination and Command Centre (NC4) identified a critical vulnerability in a content editing extension in the Joomla content management system (CMS) that allows attackers to create rogue editor accounts and remotely upload and execute malicious PHP code without authentication. The flaw could enable hackers to gain full control of affected web servers before the login process.
According to NC4, attackers could use the vulnerability to establish persistent backdoor access, steal data, alter website content, move laterally across connected systems and potentially take control of the entire hosting environment. Such attacks could compromise the confidentiality, integrity and availability of critical government data and services.
NC4 urged operators of Malaysia's National Critical Information Infrastructure (NCII) to promptly report any suspicious activity or cybersecurity incidents in accordance with the provisions of Act 854 to support national-level coordination and cyber threat intelligence sharing.
NACSA also advised organisations using the Joomla content management system urgently upgrade to the latest version or update functions provided by the manufacturer to minimise the risk of exploitation./.
